oss-security - Re: CVE Request: kwallet: incorrect CBC encryption handling

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150109155306.GA9779@eldamar.local>
Date: Fri, 9 Jan 2015 16:53:06 +0100
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Cc: CVE Assignments MITRE <cve-assign@...re.org>,
	Albert Astals Cid <aacid@....org>
Subject: Re: CVE Request: kwallet: incorrect CBC encryption
 handling

Hi,

On Fri, Jan 09, 2015 at 07:52:44AM +0100, Marcus Meissner wrote:
> On Fri, Jan 09, 2015 at 07:02:38AM +0100, Salvatore Bonaccorso wrote:
> > The following KDE Project Security Advisory was issued at
> > https://www.kde.org/info/security/advisory-20150109-1.txt .
[...]
> > 
> > Could you please assing a CVE for this issue?
> 
> This is already CVE-2013-7252 I think.

Thank you, I have missed that.

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.